95db19e4507d87826db7c17b9083ded3_JaffaCakes118 | Triage

Sharing

General

Target

95db19e4507d87826db7c17b9083ded3_JaffaCakes118
Size

188KB
MD5

95db19e4507d87826db7c17b9083ded3
SHA1

b218e1ab8731986e4bace6b4bd60f5ad72147225
SHA256

ba160b763aa4bc21b25bfe37e54bdc53d4171bafa066938577f927d6d1184563
SHA512

2e988001d92159b6c5c29cc63e0dca828cdb451f8c116d7319964b7ffdd018f71b5e7e7f0f2199db89d5385950289706331f1a6151ef1976ea0579add57c2087
SSDEEP

3072:iCe3iDPxx4arrupqMg+DIrE6lS0BxTstrdXQR6f4azdJhmzvC7tXp:M3iDPf4aXupqM2s0OhXKHaz4CxX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
95db19e4507d87826db7c17b9083ded3_JaffaCakes118

Files

95db19e4507d87826db7c17b9083ded3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3e266c2eb2f182627c893cc935a4c16f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

GetWindowInfo
MessageBoxW

oleacc

LresultFromObject
CreateStdAccessibleObject

kernel32

CreateTapePartition
LCMapStringA
ClearCommError
GetModuleHandleA
EnumResourceNamesA
ExitProcess
ExitProcess
GetCPInfo
LCMapStringW
GetProcAddress

Sections

.text
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lib
Size: 512B - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ